This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer File: BE564B2EFF08B30078A1960732464840B104EF35.cer (raw, json) Hash identifier: QclbJTAbTChtpBmRHTORftsiuk21QB22Cp4nZcltPgg= Subject key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 629A52C540096014D502EE2CEE9F3EB78E4E42A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:59:34 +0000 Certificate not after: Mon 18 Jan 2027 11:04:34 +0000 Subordinate resources: IP: 160.30.150.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9a:52:c5:40:09:60:14:d5:02:ee:2c:ee:9f:3e:b7:8e:4e:42:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:59:34 2026 GMT Not After : Jan 18 11:04:34 2027 GMT Subject: CN=BE564B2EFF08B30078A1960732464840B104EF35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:b9:33:ff:b0:cf:33:e3:df:54:79:b2:90: 47:ec:5f:d5:87:92:6d:73:23:c3:f5:61:13:e2:e9: a4:11:32:db:6a:4d:3d:b7:0f:6d:1d:f4:2d:f6:a1: 58:a3:ae:7b:81:5b:5b:e7:e0:3b:db:ee:92:d0:62: b3:a7:3f:d5:c4:49:10:22:54:d6:cf:ea:3b:0e:bf: 4a:9e:71:13:e4:89:1e:6f:3a:6d:13:2c:18:38:b5: c5:2d:7f:08:17:23:f1:7c:1a:58:44:46:e9:bc:b4: 86:5b:59:ea:9e:d7:f7:46:6c:07:ff:23:59:54:2d: 70:9e:13:0d:9f:93:e5:67:4f:b9:83:7b:0e:2c:c4: cd:da:ea:44:88:28:7e:15:40:6e:24:cd:d0:9b:bc: 59:30:e6:82:e9:88:41:cf:d8:f8:7f:ce:dd:2a:4d: 93:30:4a:2e:22:e6:03:38:1f:b8:ac:66:f5:f7:68: 63:22:31:50:fb:9b:8c:71:2e:77:8a:35:b6:09:a3: 9a:85:c3:1a:02:f0:99:5f:2b:8b:a6:00:27:d9:41: 03:9f:c7:95:2a:7f:55:a0:73:b4:a8:96:06:7d:a6: 77:09:a3:5f:71:93:8c:f6:8b:ef:48:53:b8:4f:c6: 8c:20:1c:15:18:b7:b5:f1:31:3d:5f:fa:2b:62:5a: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.150.0/23 Signature Algorithm: sha256WithRSAEncryption a5:51:66:46:5b:2a:a1:96:a1:d6:fc:a6:89:db:7c:b7:ca:83: 9a:5d:59:ee:e6:09:3b:c7:82:da:9c:12:c5:75:52:ea:f8:3f: 3c:7d:c0:76:16:2b:03:01:5a:20:27:ca:0e:34:90:f3:fb:af: 6d:39:e6:3c:0e:08:b0:00:29:e6:38:ae:94:4f:1e:3f:89:1d: 42:42:03:f3:90:1f:7b:f6:03:af:d7:15:a8:80:68:0d:c4:ef: a1:9a:27:9f:28:96:ef:b7:d7:d7:45:4f:9f:cd:b7:a4:e5:6b: 65:22:2f:18:df:61:fa:e2:76:15:0a:2f:13:93:43:be:40:6b: 42:89:01:64:21:da:07:1e:46:4b:b4:f6:74:7b:57:22:e1:25: 36:83:47:dd:4f:01:74:71:be:3b:7b:47:1b:f8:9f:39:d4:73: e0:0e:e7:6d:70:cd:85:36:9b:4d:58:77:90:1b:92:4e:87:30: b5:64:0d:69:63:e0:82:d7:fa:80:9c:62:b0:d4:8a:11:b2:1c: 89:04:22:f4:e2:b3:95:17:ff:0a:1f:3c:81:d1:4e:62:77:2b: 25:cb:10:1c:8f:6a:e5:57:bc:11:8b:e2:0a:9f:8f:6b:e2:e7: e5:b9:ea:62:0e:69:de:ba:2e:43:b9:15:d2:16:5c:f1:f2:8c: 80:aa:e0:04 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUYppSxUAJYBTVAu4s7p8+t45OQqYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwNTkzNFoX DTI3MDExODExMDQzNFowMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5 NjA3MzI0NjQ4NDBCMTA0RUYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXYuTP/sM8z499UebKQR+xf1YeSbXMjw/VhE+LppBEy22pNPbcPbR30Lfah WKOue4FbW+fgO9vuktBis6c/1cRJECJU1s/qOw6/Sp5xE+SJHm86bRMsGDi1xS1/ CBcj8XwaWERG6by0hltZ6p7X90ZsB/8jWVQtcJ4TDZ+T5WdPuYN7DizEzdrqRIgo fhVAbiTN0Ju8WTDmgumIQc/Y+H/O3SpNkzBKLiLmAzgfuKxm9fdoYyIxUPubjHEu d4o1tgmjmoXDGgLwmV8ri6YAJ9lBA5/HlSp/VaBztKiWBn2mdwmjX3GTjPaL70hT uE/GjCAcFRi3tfExPV/6K2Javv0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL5WSy7/CLMAeKGWBzJGSECxBO81MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzM4OTU3MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3Mzg5NTcx LzEvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgHpYwDQYJKoZIhvcNAQELBQADggEBAKVRZkZb KqGWodb8ponbfLfKg5pdWe7mCTvHgtqcEsV1Uur4Pzx9wHYWKwMBWiAnyg40kPP7 r2055jwOCLAAKeY4rpRPHj+JHUJCA/OQH3v2A6/XFaiAaA3E76GaJ58olu+319dF T5/Nt6Tla2UiLxjfYfridhUKLxOTQ75Aa0KJAWQh2gceRku09nR7VyLhJTaDR91P AXRxvjt7Rxv4nznUc+AO521wzYU2m01Yd5Abkk6HMLVkDWlj4ILX+oCcYrDUihGy HIkEIvTis5UX/wofPIHRTmJ3KyXLEByPauVXvBGL4gqfj2vi5+W56mIOad66LkO5 FdIWXPHyjICq4AQ= -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:18 2026 by rpki-client